CVE-2025-53367

Published Jul 3, 2025

Last updated 4 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-53367 is an out-of-bounds write vulnerability affecting DjVuLibre, a GPL implementation of the DjVu format, in versions prior to 3.5.29. The vulnerability lies within the `MMRDecoder::scanruns` method, which fails to properly validate the bounds of the `xr` pointer, potentially leading to writes beyond the allocated memory buffer. This can result in heap corruption. An out-of-bounds read with `pr` is also possible due to similar boundary checking issues. Successful exploitation of this vulnerability could allow an attacker to craft a malicious DjVu document that triggers heap corruption. This may lead to arbitrary memory writes, potentially enabling remote code execution, system compromise, or application crashes. Version 3.5.29 of DjVuLibre contains a patch that addresses this vulnerability.

Description: DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.
Source: security-advisories@github.com
NVD status: Received

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.4
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

security-advisories@github.com: CWE-125

Hype score: Not currently trending

References